ssteele/wp-typesanity

在WordPress中使用时通过类型清理输入

1.0.2 2018-03-25 00:00 UTC

This package is not auto-updated.

Last update: 2024-09-29 05:48:26 UTC


README

一个通过单元类型清理用户输入的WordPress插件

描述

WP Typesanity在处理WordPress环境中的各种基础PHP单元类型时提供了一致的用户体验。所有输入都被转换为字符串并通过wp_kses过滤以去除标记和“恶意脚本”。你可以传递第二个参数给sanitize来指定预期的单元类型。字符串、整数和浮点数会被验证,并保留预期数据。意外数据将被设置为空字符串。现在你可以放心地快速开发,因为你所处理的单元类型正是你所期望的。下面是单元类型预期的详细表格

设置

通过终端导航到你的插件并执行

composer require ssteele/wp-typesanity

文档

清理用户输入

$translator = new UserInput();
$_POST = [
    'name' => 'Steve Steele',
    'id'   => 1,
    'gpa'  => 3.9,
];
$name = $translator->sanitize($_POST['name']);          // sanitize name

传入可选参数[s]tring,[i]nteger,或[f]loat来确保正确的数据类型

$name = $translator->sanitize($_POST['name'], 's');     // sanitize name as string
$id = $translator->sanitize($_POST['id'], 'i');         // sanitize id as integer
$gpa = $translator->sanitize($_POST['gpa'], 'f');       // sanitize gpa as float

批量清理用户输入数组

$post = $translator->sanitize($_POST);                  // sanitize all post elements
$post = $translator->sanitize($_POST, 'i');             // sanitize all post elements as integer
$post = $translator->sanitize($_POST, ['s', 'i', 'f']); // sanitize all post elements (of known order) against respective types